- dovecot - dovecot.org

[Dovecot] Tracking logins
by Alex 03 Mar '14

03 Mar '14

Hi, I'm using dovecot-2.1.17 on fc18 and wondered if there is some mechanism, perhaps a database, that can store the logins/logouts for each user? I realize there's something already logged to syslog, but I'd like more of a history. While lastlog is great for users that actually login, my dovecot users don't login, just check email via pop and imap. Any ideas greatly appreciated. Thanks, Alex

3 5

[Dovecot] maildir quota divergence
by Juan Carlos Sanchez 03 Mar '14

03 Mar '14

Hello; We are using maildir quotas and have found differences in many users in respect to what system command are showing and doveadm quotas. For example, four user test, we have: doveadm quota get -u test Quota name Type Value Limit % STORAGE 98066 102400 95 MESSAGE 883 - 0 But if we check user mail_location with "du" system command we get he is using 70458 Kb. We are running dovecot 2.1.17 ¿any clue? Thanks in advance.

3 5

[Dovecot] running postlogin script result in libgcc_s.so.1 must be installed for pthread_cancel to work
by Kim Johansen 02 Mar '14

02 Mar '14

Hey, I try to run a postlogin script with: service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login /etc/dovecot/popafter.sh user = $default_internal_user unix_listener postlogin { } } In my popafter.sh I call a php script, and that result in: dovecot: postlogin: Error: libgcc_s.so.1 must be installed for pthread_cancel to work dovecot: postlogin: Error: Aborted (core dumped) I have tried google it, but cannot find a solution there works for me, anybody who can help me? mail dovecot $ sudo dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-59-generic x86_64 Ubuntu 12.04.4 LTS ext4 disable_plaintext_auth = no mail_location = maildir:/var/mail/vmail/%d/%n:INDEX=/var/mail/vmail/%d/%n/indexes mail_plugins = quota passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_exceeded_message = The user you are trying to reach is over quota. quota_rule = *:bytes=100M quota_rule2 = INBOX.Trash:storage=+20%% } protocols = " imap lmtp pop3" service imap { executable = imap postlogin } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login /etc/dovecot/popafter.sh user = $default_internal_user } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } protocol imap { mail_plugins = quota imap_quota } Thanks, Kim

4 6

[Dovecot] No speed improvement with FTS for iOS 7?
by Nicholas Riley 02 Mar '14

02 Mar '14

Hi, I recompiled Dovecot with Lucene FTS to try to improve iOS 7 IMAP search speed. Unfortunately this does not seem to help. I have 60 mailboxes, totaling 300 MB; lucene-indexes is 30 MB in size. % doveadm mailbox status -t all '*' messages=16335 recent=0 unseen=1736 vsize=280049586 Searching for a single word which is present in two messages of one mailbox takes 40 seconds to return. This is true whether or not fts is enabled. doveadm search takes much less than 1 second to do the same search. % time doveadm search BODY cython d8f09230c97af952b60c0000c1443b93 1 d8f09230c97af952b60c0000c1443b93 2 doveadm search BODY cython 0.18s user 0.05s system 99% cpu 0.230 total With fts disabled, it takes about 6.5 seconds. This is still a long way from 40 seconds. Is there any way I can make dovecot perform better here? Thanks, -- Nicholas Riley <njriley(a)illinois.edu>

3 3

[Dovecot] Dsync replication with LDAP and auth_bind=yes
by Michał Franczak 02 Mar '14

02 Mar '14

Hello, I have working dovecot configuration with LDAP based authentication in Active Directory. I'd like to use dsync replication but dovecot can't do user lookups. Is it possible to configure replication in such architecture? doveadm user '*' Returns only one local dovecot user. dovecot --version 2.2.10 My dovecot-ldap.conf look as follows: hosts = ad.domain.com:389 ldap_version = 3 auth_bind = yes dn = src_mail_ldap dnpass = somePass base = OU=users,DC=domain,DC=com scope = subtree deref = never user_filter = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_filter = (&(userPrincipalName=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_attrs = userPassword=password default_pass_scheme = CRYPT user_attrs = =home=/var/vmail/vmail1/%Ld/%Ln/Maildir/,=mail=maildir:/var/vmail/vmail1/%Ld/%Ln/Maildir/ Best Regards -- Michal

1 0

[Dovecot] Pluggable mailstore
by Jesus Cea 02 Mar '14

02 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Reading the archives I see messages from a long (years) time ago discussing pluggable mailstores. No recent news, though. Any progress?. Current status? Regards - -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJTEruXAAoJEGjgN61Khv5D0hMIAK8fH6Qu+fvliQXjpTFutJ9r nw86mVM5OjPtNKw3O4/0/SfiM+/36rrT53rThbb/guDAIkNwt05NgfIbjdd74jRw 8U+CzoG/fVDe9jV2tzy5UThogVALKSxj1+EQrTk3PwepF68NZYb+s1ZDrfga7LKG F0+wt+XGTga4hIIkPGHoEDCQHX5Z2VpZwItsPXIta1Dv+ObeJtVcv11xL6raf3R2 0FFF1fj0OcKuGFBNH9cKiFTq5jvHb3QzK2205VDpsv5rnNnYZT9pbFHrtZ3Qk6O9 nxKSQVjRjf2pGMo9mjD/qxq/LUQFUVkJFdeueN/Z9KWeqm6MC/n16GCYBYgWpXU= =LrP4 -----END PGP SIGNATURE-----

1 0

[Dovecot] + prefix in dovecot-virtual
by Nicholas Riley 01 Mar '14

01 Mar '14

Hi, The "+" prefix in dovecot-virtual does not seem to be documented. only discovered it because I tried to include a mailbox whose name began with + and Dovecot gave me an error when I tried to copy to it. I see it was added here: http://hg.dovecot.org/dovecot-2.2/rev/be0f0de75e34 My dovecot-virtual file looked like this: !+/2014-03 +/2014-02 all I just added another + to the second line and it seems to work. I don't care about \Recent thankfully but is there a better way to specify a mailbox whose name begins with +? Thanks. -- Nicholas Riley <njriley(a)illinois.edu>

1 0

[Dovecot] Force SSL authentication per user basis
by Urban Loesch 28 Feb '14

28 Feb '14

Hi, I'm searching a way to force encrypted connections for POP3/IMAP on a per user basis. To not break clients which still connect in plaintext (there are still many of it) I must implement a mechanism to force encrypted connections on a per user basis. The users and passwords are stored in a mysql database. So there would be no problem to expand the database with a column like "ssl_tls" -> yes/no. The problem now: how can I get dovecot to process this field in the right way? I searched the list and googled about such a way, but I can't find any solution. My Dovecot version is 2.2.12. Many thanks and regards Urban Loesch

1 1

Re: [Dovecot] Logging authentication failures when Dovecot's auth service used to authenticate postfix smtpd
by MV 28 Feb '14

28 Feb '14

> in case of SASL postfix is talking via a unix socket so there is no connection IP dovecot knows about I don't not where Dovecot get the client IP from, but having auth socket in place, below is a redacted extract from my logs. As you can see Dovecot does know the client's IP. Dovecot config: auth_verbose = yes auth_debug = no # Dovecot log after submission/smtpd AUTH successful <nothing> # Dovecot log after submission/smtpd AUTH failure ... auth: Info: passwd-file(joe(a)example.com,46.z.z.z): Password mismatch Dovecot config: auth_verbose = yes auth_debug = yes # Dovecot log after submission/smtpd AUTH successful ... auth: Debug: client in: AUTH 1 PLAIN service=smtp nologin lip=212.x.x.x rip=46.z.z.z secured resp=<hidden> ... auth: Debug: passwd-file(joe(a)example.com,46.z.z.z): lookup: user=joe(a)example.com file=/etc/dovecot/virtual_users ... auth: Debug: client passdb out: OK 1 user=joe(a)example.com # Dovecot log after submission/smtpd AUTH failure ... auth: Debug: client in: AUTH 2 PLAIN service=smtp nologin lip=212.x.x.x rip=46.z.z.z secured resp=<hidden> ... auth: Info: plain(?,46.z.z.z): invalid input ... auth: Debug: client passdb out: FAIL 2 And regardless of Docecot config, postfix always logs the same stuff # Postfix log after submission/smtpd AUTH successful (QUIT after AUTH without sending RCPT TO) ... postfix/smtpd[5678]: connect from host.client.foo.tld[46.z.z.z] ... postfix/smtpd[5678]: disconnect from host.client.foo.tld[46.z.z.z] # Postfix log after submission/smtpd AUTH failure ... postfix/smtpd[1234]: connect from host.client.foo.tld[46.z.z.z] ... postfix/smtpd[1234]: warning: host.client.foo.tld[46.z.z.z]: SASL PLAIN authentication failed: ... postfix/smtpd[1234]: disconnect from host.client.foo.tld[46.z.z.z]

1 0

[Dovecot] Logging authentication failures when Dovecot's auth service used to authenticate postfix smtpd
by MV 28 Feb '14

28 Feb '14

Hello, tl;dr: Is there a way to get dovecot's auth to log failed smtp authentications without having to switch on "auth_verbose"? postfix version 2.11.0 and dovecot version 2.2.12 I'm currently migrating my postfix+courier to postfix+dovecot and so far it's working as expected. Except for logging smtp login failures. Despite Postfix logging successful authentications (see sample below), it doesn't log failed smtp logins. Feb 25 22:28:53 mailer2 postfix/submission[20274]: C981B20198: client=A-B-C-D.*****.net[A.B.C.D]:63107, sasl_method=PLAIN, sasl_username=joe(a)example.net And since my postfix setup authenticates virtual users through Dovecot's auth, I thought maybe dovecot could report smtp login failures the same way it reports imap and pop3 login failures. Below is a sample extracted from "info_log_path" after several imap and pop3 login failures. (Obviously the IP 255.... is made up and irrelevant for this mater). # begin extract "/var/log/dovecot-info.log" 2014-02-27 21:14:26 auth: Info: passwd-file(joe(a)example.net,255.255.255.255,<Y0lbzmnzfwAuQV80>): Password mismatch 2014-02-27 21:16:46 auth: Info: passwd-file(foobar,255.255.255.255,<Y0lbzmnzfwAuQV80>): unknown user 2014-02-27 21:52:00 auth: Info: passwd-file(foo(a)example.net,255.255.255.255,<0Su6VGrzGwAuQV80>): unknown user 2014-02-27 21:53:35 auth: Info: plain(?,255.255.255.255,<0Su6VGrzGwAuQV80>): Empty username 2014-02-27 21:53:55 auth: Info: plain(?,255.255.255.255,<0Su6VGrzGwAuQV80>): Username character disallowed by auth_username_chars: 0x5c (username: \0) 2014-02-27 22:08:05 auth: Info: plain(?,255.255.255.255): invalid input 2014-02-27 22:09:36 auth: Info: passwd-file(joe(a)example.net,255.255.255.255): Password mismatch 2014-02-27 22:09:53 auth: Info: login(?,255.255.255.255): Empty username # end extract I've tried adding "-L -o info_log_path=/var/log/dovecot-info.log" to the both auth and auth-worker services but that yield nothing. ----------------------%<-------------------------------- auth_mechanisms = plain login auth_verbose = yes base_dir = /var/run/dovecot/ info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/virtual_users driver = passwd-file } userdb { args = username_format=%u /etc/dovecot/virtual_users default_fields = uid=vmail gid=vmail driver = passwd-file override_fields = home=/home/vmail/%d/%u result_failure = return-fail result_internalfail = return-fail } service auth-worker { executable = auth -w -L -o info_log_path=/var/log/dovecot-info.log } service auth { executable = auth -L -o info_log_path=/var/log/dovecot-info.log unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix user = postfix mode = 0660 } } service lmtp { executable = lmtp -L -o info_log_path=/var/log/dovecot-info.log unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix user = postfix mode = 0660 } } ---------------------->%-------------------------------- The relevant postfix config is ... smtpd_sasl_type = dovecot smtpd_sasl_path = private/dovecot-auth virtual_transport = lmtp:unix:private/dovecot-lmtp

2 2